Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: ivv6zurxlThl70oclbbMaBiSGKdCrlKlDkooIcufq50=
Subject key identifier: BF:D4:AC:80:4A:25:36:70:5F:07:74:BC:73:1E:64:A9:2F:4F:2F:6E
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 0196120F00319F41DEB5CC634B49BA525991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 21:01:35 +0000
Manifest this update: Mon 07 Apr 2025 21:01:35 +0000
Manifest next update: Tue 08 Apr 2025 21:01:35 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: qWjTIU/aRQhSSo8I3X5HrC7YeGO/1Mf9Cx+04oswIrM=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0f:00:31:9f:41:de:b5:cc:63:4b:49:ba:52:59:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Apr 7 21:01:35 2025 GMT
Not After : Apr 8 21:01:35 2025 GMT
Subject: CN=bfd4ac804a2536705f0774bc731e64a92f4f2f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:45:e4:d3:52:07:3a:b6:cd:a2:ae:2c:57:
8e:39:a4:a8:c5:e4:d5:74:69:95:cf:be:8f:20:9b:
e6:97:34:f1:04:2d:7b:c3:99:ab:68:56:8f:b2:59:
fb:69:f9:bd:f8:47:f6:79:34:9f:50:4e:f9:0c:40:
e2:70:71:66:a4:d8:d3:1f:ab:5d:6c:92:46:d9:a8:
5a:f1:aa:b8:ec:8d:55:c9:6f:da:f8:e2:34:ab:e7:
f7:65:55:fe:0b:09:42:49:c7:3f:06:66:60:03:6f:
07:a2:80:8b:7a:56:8b:63:e6:e0:91:22:80:99:92:
03:23:5f:01:9b:be:90:cf:48:3a:ba:34:a5:a3:bf:
99:b0:8e:1d:98:0e:70:f9:7f:a8:b3:a3:11:e4:36:
1c:9e:fe:ad:1b:41:b9:d8:15:d1:b8:ee:9f:4e:6a:
5d:94:d7:7c:25:95:a5:b2:cb:59:9a:d0:d0:48:17:
62:52:1b:99:33:0f:0b:61:df:34:6a:11:cc:8f:50:
0c:5a:61:17:6a:54:00:be:59:f0:b5:b9:1a:e2:1b:
7c:1a:77:30:ba:67:1b:1b:dd:54:b1:c5:be:e9:06:
fb:cf:00:fc:d5:94:d0:ca:f6:b1:87:14:18:60:29:
e0:b3:6d:a7:85:52:cc:f7:fa:c4:b5:87:45:df:71:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D4:AC:80:4A:25:36:70:5F:07:74:BC:73:1E:64:A9:2F:4F:2F:6E
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:03:04:1f:ec:eb:e7:a2:59:c8:eb:08:59:ee:4a:02:e7:82:
bc:85:ab:7f:90:8b:8c:d7:06:4c:a5:1f:9d:d1:42:a0:68:02:
45:aa:f9:15:34:fc:a9:4a:5f:78:a6:e1:25:b1:61:e0:51:60:
1e:1e:4d:f1:b5:0b:45:d1:68:dd:44:e5:56:6e:14:9d:f9:5c:
f2:cd:57:65:ad:42:d9:68:60:8e:99:a6:4a:45:c8:ba:3f:29:
87:67:b9:68:e7:40:5d:a8:1f:54:3f:44:6f:11:1b:fa:ee:75:
d5:8d:03:c9:a7:2c:77:23:f9:2e:23:b5:63:05:b7:16:77:77:
6f:f3:cc:f2:58:10:8b:90:f4:9c:86:58:a5:b9:ce:3b:d5:11:
88:1b:e5:11:97:f9:fe:50:82:5b:5b:c4:9c:b1:e3:98:4b:f4:
ed:24:69:c6:11:52:19:8b:a6:b8:a5:0d:27:cd:8a:b6:1f:a8:
55:83:de:84:59:18:ce:47:fb:03:f1:06:f3:74:52:ed:54:2f:
0e:4f:1d:ba:ab:fb:d0:21:e1:77:dc:84:63:39:a6:99:23:d0:
bf:65:d7:c7:75:79:bc:d9:cf:56:63:93:3a:da:8f:48:1a:18:
65:57:13:4e:da:a9:90:b9:cd:5d:2e:fa:25:b0:00:e0:1b:7e:
4a:90:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:10 2025 by rpki-client